OpenBSD admin and ports maintainer

  • 2 Posts
  • 304 Comments
Joined 1 year ago
cake
Cake day: May 29th, 2024

help-circle














  • Replying to this pretentious comment for the sake of others reading this:

    Replying to this pretentious comment for the sake of others reading this:

    Run history | grep genpasswd for why this is not a good password storage solution. One must image skill issue.

    I have history disabled in my shell, and unless your shell logs to a file, the password stays in memory.




  • /etc/unwind.conf

    block list "/var/db/unwind_blocklist"
    forwarder { X.X.X.X port X DoT X.X.X.X port X DoT }
    preference { DoT }
    

    unwind_blocklist is generated with this script I wrote:

    #!/bin/sh
    # Blocklists for unwind(8)
    
    blocklist=/var/db/unwind_blocklist
    [ ! -f $blocklist ] && \
            (umask 117; touch $blocklist && chgrp _unwind $blocklist)
    
    {
            ftp -V -o - \
                https://blocklistproject.github.io/Lists/alt-version/everything-nl.txt \
                http://winhelp2002.mvps.org/hosts.txt \
                http://sysctl.org/cameleon/hosts \
                https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt \
                https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt \
                https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/android-tracking.txt
            echo twitter.com
            echo www.twitter.com
            echo www.x.com
            echo x.com
            echo facebook.com
            echo www.facebook.com
    } | awk -safe '
            !/^M|#|(^|\.)[[:blank:]]*$|^definitely_not_porn$/ {       
                    if ($1 ~ /127\.0\.0\.1|0\.0\.0\.0/) {
                            $0 = $2
                    }
                    if ($0 ~ /[[:upper:]]/) {
                            print tolower($0)
                    } else {
                            print $0
                    }
            }
    ' | sort -u >$blocklist
    rcctl restart unwind
    

    Regenerates occasionally with cron.